| www1.afilmywap.bz/category/183/unofficial-hollywood-hindi-dubbed-movie/default/1.html |  104.21.75.148 | 301 Moved Permanently | 0 B |
URL HTTP/1.1www1.afilmywap.bz/category/183/unofficial-hollywood-hindi-dubbed-movie/default/1.html IP104.21.75.148:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /category/183/unofficial-hollywood-hindi-dubbed-movie/default/1.html HTTP/1.1
Host: www1.afilmywap.bz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Connection: keep-alive
Upgrade-Insecure-Requests: 1
HTTP/1.1 301 Moved Permanently
Date: Tue, 29 Nov 2022 04:42:28 GMT
Transfer-Encoding: chunked
Connection: keep-alive
Cache-Control: max-age=3600
Expires: Tue, 29 Nov 2022 05:42:28 GMT
Location: https://www1.afilmywap.bz/category/183/unofficial-hollywood-hindi-dubbed-movie/default/1.html
Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=J3ee3KbvHD9sjs%2BZlMOoYYK2qYro%2BdI%2BQ02Tg8WAOkm0jOxJFLJRfgP6Rwz%2FZyAEl8X6bUb0sflYgMWieasP9VpG6PqQjcZh%2FQSNCUmRSGGBVbvUeDlGaV%2BCgJZQHq5E5P%2BggA%3D%3D"}],"group":"cf-nel","max_age":604800}
NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
Vary: Accept-Encoding
Server: cloudflare
CF-RAY: 7718ad49ea72b503-OSL
alt-svc: h2=":443"; ma=60
|
|
| r3.o.lencr.org/ |  23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hasha5daf4dc99951793ae2315d4795e8146 4427507ca4d3a5632cc8f598afbc85e2195d00bd 94fb64c1c826ed7099283c0bedb3cea7ac7e1d9526794cb9fad6e761f5989d32
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "94FB64C1C826ED7099283C0BEDB3CEA7AC7E1D9526794CB9FAD6E761F5989D32"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=4174
Expires: Tue, 29 Nov 2022 05:52:03 GMT
Date: Tue, 29 Nov 2022 04:42:29 GMT
Connection: keep-alive
|
|
| ocsp.digicert.com/ |  93.184.220.29 | 200 OK | 471 B |
IP93.184.220.29:0
Hash9408cc0694fcbea57966c3a3ba906092 fddcee1fdcf3209298e41a4b1b5560357fa165f0 6ef7120d9463f56e3ddfadd5766d02da8523f34061b13bdba54bf9ab72a1e979
POST / HTTP/1.1
Host: ocsp.digicert.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 83
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Accept-Ranges: bytes
Age: 5044
Cache-Control: max-age=112376
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 04:42:29 GMT
Etag: "63848df9-1d7"
Expires: Wed, 30 Nov 2022 11:55:25 GMT
Last-Modified: Mon, 28 Nov 2022 10:31:21 GMT
Server: ECS (ska/F71A)
X-Cache: HIT
Content-Length: 471
|
|
| firefox.settings.services.mozilla.com/v1/ |  34.102.187.140 | 200 OK | 939 B |
URL HTTP/2firefox.settings.services.mozilla.com/v1/ IP34.102.187.140:0
File typeJSON data\012- , ASCII text, with very long lines (939), with no line terminators Hash14cd9a0afb6ba9a763651d5112760d1e 75d7b104ab9ab11fbb73c3f348b43b0119b5adfa 4e32a117106be587ffcd63239c16a8117eb7840830d4c9decf6527761967532e
GET /v1/ HTTP/1.1
Host: firefox.settings.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
access-control-allow-origin: *
access-control-expose-headers: Content-Length, Alert, Retry-After, Backoff, Content-Type
content-security-policy: default-src 'none'; frame-ancestors 'none'; base-uri 'none';
strict-transport-security: max-age=31536000
x-content-type-options: nosniff
content-length: 939
via: 1.1 google
date: Tue, 29 Nov 2022 04:17:51 GMT
cache-control: public,max-age=3600
content-type: application/json
age: 1478
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 344 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash009d42ffa2052b06f7c48562781ed50b 92e9bed1e1175d5a31c01259617185450cac8c62 827b0f4514f57ebdbe214ecb7f6d8912ba44fd7c5cd3cde89f886a20bc17675c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "827B0F4514F57EBDBE214ECB7F6D8912BA44FD7C5CD3CDE89F886A20BC17675C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 29 Nov 2022 10:42:29 GMT
Date: Tue, 29 Nov 2022 04:42:29 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash9fce5679881bf302a8978a0b462f01a9 b699fe030ea13ac73813e655c42ed9b531925e2b a3ec545a8f9364ac9062eddb41279e1465687a1b60f9c1dec6b3a3df8b033eb3
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "A3EC545A8F9364AC9062EDDB41279E1465687A1B60F9C1DEC6B3A3DF8B033EB3"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5459
Expires: Tue, 29 Nov 2022 06:13:28 GMT
Date: Tue, 29 Nov 2022 04:42:29 GMT
Connection: keep-alive
|
|
| content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain | 34.160.144.191 | 200 OK | 5.3 kB |
URL HTTP/2content-signature-2.cdn.mozilla.net/chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain IP34.160.144.191:0
File typePEM certificate\012- , ASCII text Hash9ebddc2b260d081ebbefee47c037cb28 492bad62a7ca6a74738921ef5ae6f0be5edebf39 74bbb7cba16f7d084a08a0907d47d7496e5c148f904707ec6950f8f6a61027e5
GET /chains/remote-settings.content-signature.mozilla.org-2022-12-30-09-21-26.chain HTTP/1.1
Host: content-signature-2.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
x-amz-id-2: v7Wq+KlF0cJ8sPlgPupBf7N4Cc5lGS/ILGsiN7bxYZ9VDU9iLgHCKKEZh3Lfd0aIZCOuMKyO1a6+nyN/3xb94w==
x-amz-request-id: KXXE7W40NBKFTSCV
content-disposition: attachment
accept-ranges: bytes
server: AmazonS3
content-length: 5348
via: 1.1 google
date: Tue, 29 Nov 2022 03:45:17 GMT
age: 3432
last-modified: Thu, 10 Nov 2022 09:21:27 GMT
etag: "9ebddc2b260d081ebbefee47c037cb28"
content-type: binary/octet-stream
cache-control: public,max-age=3600
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| contile.services.mozilla.com/v1/tiles | 34.117.237.239 | 200 OK | 12 B |
URL HTTP/2contile.services.mozilla.com/v1/tiles IP34.117.237.239:0
File typeJSON data\012- , ASCII text, with no line terminators Hash23e88fb7b99543fb33315b29b1fad9d6 a48926c4ec03c7c8a4e8dffcd31e5a6cdda417ce 7d8f1de8b7de7bc21dfb546a1d0c51bf31f16eee5fad49dbceae1e76da38e5c3
GET /v1/tiles HTTP/1.1
Host: contile.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
date: Tue, 29 Nov 2022 04:42:29 GMT
content-type: application/json
content-length: 12
strict-transport-security: max-age=31536000
via: 1.1 google
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 344 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash009d42ffa2052b06f7c48562781ed50b 92e9bed1e1175d5a31c01259617185450cac8c62 827b0f4514f57ebdbe214ecb7f6d8912ba44fd7c5cd3cde89f886a20bc17675c
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 344
ETag: "827B0F4514F57EBDBE214ECB7F6D8912BA44FD7C5CD3CDE89F886A20BC17675C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=21600
Expires: Tue, 29 Nov 2022 10:42:29 GMT
Date: Tue, 29 Nov 2022 04:42:29 GMT
Connection: keep-alive
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashf50fd635895870df33a17fe377a6a038 dd65dfbbc810b095432cfd59f971af04a9e31ab7 ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 04:42:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| www.googletagmanager.com/gtag/js?id=UA-198155354-1 | 142.250.74.168 | 200 OK | 44 kB |
URL HTTP/2www.googletagmanager.com/gtag/js?id=UA-198155354-1 IP142.250.74.168:0
File typeASCII text, with very long lines (1921) Hashab359bad9f1c7b75f7aba64636945324 e4ec1b234106a7f7b8cf12e22d1149eb6f60dca1 b3788f39e8fc86aaf31dbd7e02cbab82f37da4d3182adbbf406f4dfd687aa242
GET /gtag/js?id=UA-198155354-1 HTTP/1.1
Host: www.googletagmanager.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
content-type: application/javascript; charset=UTF-8
access-control-allow-origin: *
access-control-allow-credentials: true
access-control-allow-headers: Cache-Control
content-encoding: br
vary: Accept-Encoding
date: Tue, 29 Nov 2022 04:42:29 GMT
expires: Tue, 29 Nov 2022 04:42:29 GMT
cache-control: private, max-age=900
last-modified: Tue, 29 Nov 2022 03:00:00 GMT
strict-transport-security: max-age=31536000; includeSubDomains
cross-origin-resource-policy: cross-origin
server: Google Tag Manager
content-length: 43681
x-xss-protection: 0
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf1cf33e28268721f31b71f1cf6052744 3f345568f6674a6dc3b177637192d2aed43c6e56 1d11a15d27dc0a32244f04c8a5c7b1cd60fcb3f68e0a247051d9433727cf0b55
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "1D11A15D27DC0A32244F04C8A5C7B1CD60FCB3F68E0A247051D9433727CF0B55"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=15421
Expires: Tue, 29 Nov 2022 08:59:30 GMT
Date: Tue, 29 Nov 2022 04:42:29 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash4f5de8bcce1ec4a73a8038b4c62406fb 0a93cb3c9f2d85e5e46f9b1670a16c8e5077f605 ac4ecc99de55563004b61d93b50ffc1c30462114a6d36f086904b174b74fbff9
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "AC4ECC99DE55563004B61D93B50FFC1C30462114A6D36F086904B174B74FBFF9"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=13903
Expires: Tue, 29 Nov 2022 08:34:12 GMT
Date: Tue, 29 Nov 2022 04:42:29 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash9f81083447814e24fecc696f60906c19 d0c96469badccd34477f578b4d6ebff79a23c35b 174bb57d9792a8666d90e4bba7e17e547b56a402a8901970444d139bcda7559e
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "174BB57D9792A8666D90E4BBA7E17E547B56A402A8901970444D139BCDA7559E"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=19131
Expires: Tue, 29 Nov 2022 10:01:20 GMT
Date: Tue, 29 Nov 2022 04:42:29 GMT
Connection: keep-alive
|
|
| halltrasy.com/gqAKupXAAyO9OdQg/33550 |  172.255.6.120 | 200 OK | 26 B |
URL HTTP/1.1halltrasy.com/gqAKupXAAyO9OdQg/33550 IP172.255.6.120:0
File typeASCII text, with no line terminators Hash4e5d65669f8dcd928dad06adf883f025 d771713d758c3348dd7e5b38bb40c7935399ae46 0bebbf029fa045e4f462855e6c44edf8aaa36ded05b07a8ce456b67416d20c95
GET /gqAKupXAAyO9OdQg/33550 HTTP/1.1
Host: halltrasy.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 04:42:29 GMT
Content-Type: text/html; charset=UTF-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www5.afilmywap.bz
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Wed, 30-Nov-2022 04:42:29 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJxNjM0KgkAYRW0qSwrjQg%2FQC2T%2Fi7bVMnThAwxmXzFg84kz%2FdjTpwbR5nI4cK7jOGLsQ6gcw%2B0i2M6D9TJYbNZoX4khwgjDlO%2FaFqXUyY3ghlw8kxJuQVfFGmK%2BwuDLMuUzoRtG0z%2FXRIPIZDzZ1z8lOqmqt1bwav52vaprXFuZHP4uU69JzNndVi8GniYrTU50hrdPThnNDvER%2Fs82H24LfWVkXvCrrHhk1Y3erEny5WLIVqr1cMUHDLFHVQ%3D%3D; expires=Wed, 30-Nov-2022 04:42:29 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| haikcarlage.com/re9hUHGpr95/34243 | 23.109.248.151 | 200 OK | 25 B |
URL HTTP/1.1haikcarlage.com/re9hUHGpr95/34243 IP23.109.248.151:0
File typeASCII text, with no line terminators Hashd488addc5df5fc9b9ff4135bb4e3a823 6ce56f48e851df4d562b43d3bc1269a504ae83fc d1e90b8aef655ca37932287e04cbda72092eb029fe90de2bac019c10d3431f60
GET /re9hUHGpr95/34243 HTTP/1.1
Host: haikcarlage.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx
Date: Tue, 29 Nov 2022 04:42:29 GMT
Content-Type: application/javascript; charset=utf-8
Transfer-Encoding: chunked
Connection: keep-alive
Keep-Alive: timeout=20
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www5.afilmywap.bz
Access-Control-Allow-Headers: content-type, megageocheckolololo, x-forwarded-for
Access-Control-Max-Age: 600
Access-Control-Allow-Methods: GET, POST, OPTIONS
Set-Cookie: GL_UI4=eJw9jd1OhDAYRIHy42aFOAkPsI9QVBAvvfEVvCSl%2FcC60G5KXfTtbUz07mTmTCaKoqSuEF9zBvYpWpzU1HSS9428bx9417WPgtM09s9j%2F9Q1gvc46G3wYlzIp7idyZDTcpBWUYm7UP0lZ2N3kyIbnTCqRLYGYylRjM7uG7maITViJRSv2tFkv4IhPqwDa3gbWJvAMUdit5pVBxRv2qiwrI5IGl6VeYTjZRF%2Bsm4dtMpjZLMTihC%2F4EYKT7N13ygUbWdvL4Bd1PDv%2Fx6zveHIFV21JGTWv5P7AaoaStk%3D; expires=Wed, 30-Nov-2022 04:42:29 GMT; Max-Age=86400; path=/; secure; SameSite=None
GL_GI10=eJxNjM0KgkAYRW0qSwrjQg%2FQC2T%2Fi7bVMnThAwxmXzFg84kz%2FdjTpwbR5nI4cK7jOGLsQ6gcw%2B0i2M6D9TJYbNZoX4khwgjDlO%2FaFqXUyY3ghlw8kxJuQVfFGmK%2BwuDLMuUzoRtG0z%2FXRIPIZDzZ1z8lOqmqt1bwav52vaprXFuZHP4uU69JzNndVi8GniYrTU50hrdPThnNDvER%2Fs82H24LfWVkXvCrrHhk1Y3erEny5WLIVqr1cMUHDLFHVQ%3D%3D; expires=Wed, 30-Nov-2022 04:42:29 GMT; Max-Age=86400; path=/; secure; SameSite=None
Content-Encoding: gzip
Vary: Accept-Encoding
Strict-Transport-Security: max-age=1
X-Content-Type-Options: nosniff
|
|
| ocsp.pki.goog/gts1c3 | 142.250.74.35 | 200 OK | 472 B |
IP142.250.74.35:0
Hashf50fd635895870df33a17fe377a6a038 dd65dfbbc810b095432cfd59f971af04a9e31ab7 ebd9b6c3f67865c297d08802839c940994424000df3bf8a3f1316b8e13666e94
POST /gts1c3 HTTP/1.1
Host: ocsp.pki.goog
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 84
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Content-Type: application/ocsp-response
Date: Tue, 29 Nov 2022 04:42:29 GMT
Cache-Control: public, max-age=14400
Server: ocsp_responder
Content-Length: 472
X-XSS-Protection: 0
X-Frame-Options: SAMEORIGIN
|
|
| js.wpadmngr.com/static/adManager.m.js | 45.133.44.24 | 200 OK | 35 kB |
URL HTTP/2js.wpadmngr.com/static/adManager.m.js IP45.133.44.24:0 ASN#39572 DataWeb Global Group B.V.
Hashd4fdf66a5f31ab89e95e61caa73f8ed7 5824bc912086010793a79ba62d069e3df7447e95 d80ad9fa84194c381ffdbebddb8f1ea8422af684724fcc826800dbb1c84711a7
GET /static/adManager.m.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www5.afilmywap.bz
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:42:29 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 15 Nov 2022 13:38:16 GMT
etag: W/"63739648-17810"
content-encoding: gzip
expires: Tue, 29 Nov 2022 04:47:29 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| js.wpadmngr.com/npc/sdk/wp-banners.js | 45.133.44.24 | 200 OK | 0 B |
URL HTTP/2js.wpadmngr.com/npc/sdk/wp-banners.js IP45.133.44.24:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /npc/sdk/wp-banners.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:42:30 GMT
content-type: application/javascript; charset=utf-8
content-length: 0
server: nginx/1.18.0
last-modified: Fri, 20 Aug 2021 15:14:31 GMT
etag: "611fc6d7-0"
expires: Tue, 29 Nov 2022 04:47:30 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| www.google-analytics.com/analytics.js | 142.250.74.174 | 200 OK | 20 kB |
URL HTTP/2www.google-analytics.com/analytics.js IP142.250.74.174:0
File typeASCII text, with very long lines (1325) Hash47e6f374ca946fddd5b59871b325736c baa9282efc8785e84d247c3bff518eaa45f101c4 16580b5c87c58e5702e411f1888fdef511094e4cd6d62bb47d16291ffb25985e
GET /analytics.js HTTP/1.1
Host: www.google-analytics.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
strict-transport-security: max-age=10886400; includeSubDomains; preload
x-content-type-options: nosniff
vary: Accept-Encoding
content-encoding: gzip
cross-origin-resource-policy: cross-origin
server: Golfe2
content-length: 20039
date: Tue, 29 Nov 2022 04:41:08 GMT
expires: Tue, 29 Nov 2022 06:41:08 GMT
cache-control: public, max-age=7200
age: 82
last-modified: Tue, 27 Sep 2022 22:01:05 GMT
content-type: text/javascript
alt-svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q050=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,h3-Q043=":443"; ma=2592000,quic=":443"; ma=2592000; v="46,43"
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashcd3d47a4888322339c08e27e1f166936 b49e298cad042730978ee0bb1075b2f336c0fb5c 4a290f823a00f2f81d3d2809bf00cdebdbbae76a1e0d49a6ad6b4c98e53639a1
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "4A290F823A00F2F81D3D2809BF00CDEBDBBAE76A1E0D49A6AD6B4C98E53639A1"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=3813
Expires: Tue, 29 Nov 2022 05:46:03 GMT
Date: Tue, 29 Nov 2022 04:42:30 GMT
Connection: keep-alive
|
|
| na.nawpush.com/tags/6720?version_name=d | 45.133.44.25 | 200 OK | 961 B |
URL HTTP/2na.nawpush.com/tags/6720?version_name=d IP45.133.44.25:0 ASN#39572 DataWeb Global Group B.V.
Hash5bdfe7a87843e35444293a3bb6e3e760 24c078560b5854cfe455fce0a8413225fcc48fcf d4878018121843ac33de15f2d351fc564b225e875711d88072a8932f2344ba8f
GET /tags/6720?version_name=d HTTP/1.1
Host: na.nawpush.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www5.afilmywap.bz
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:42:30 GMT
content-type: application/json
content-length: 924
server: nginx/1.18.0
cache-control: max-age=300, public
x-proxy-cache: EXPIRED
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| js.wpadmngr.com/static/adManager.js | 45.133.44.24 | 200 OK | 1.1 kB |
URL HTTP/2js.wpadmngr.com/static/adManager.js IP45.133.44.24:0 ASN#39572 DataWeb Global Group B.V.
Hashd09736f4b94ed78bc24c4c1891f6a7f6 b66a2d12b09a0eef97d098e8bfd7f8e87fe64c3b 09d0e87c05ed3b9b40c175c1b27bed8e96111ef7e6f4d1800f00b1409931f3e2
GET /static/adManager.js HTTP/1.1
Host: js.wpadmngr.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:42:29 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Wed, 13 Jul 2022 06:52:04 GMT
etag: W/"62ce6b94-4e2"
content-encoding: gzip
expires: Tue, 29 Nov 2022 04:47:29 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| push.services.mozilla.com/ | 54.148.213.75 | 101 Switching Protocols | 0 B |
URL HTTP/1.1push.services.mozilla.com/ IP54.148.213.75:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET / HTTP/1.1
Host: push.services.mozilla.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Sec-WebSocket-Version: 13
Origin: wss://push.services.mozilla.com/
Sec-WebSocket-Protocol: push-notification
Sec-WebSocket-Extensions: permessage-deflate
Sec-WebSocket-Key: 8gymGODvmP7gekML/Atc+g==
Connection: keep-alive, Upgrade
Sec-Fetch-Dest: websocket
Sec-Fetch-Mode: websocket
Sec-Fetch-Site: cross-site
Pragma: no-cache
Cache-Control: no-cache
Upgrade: websocket
HTTP/1.1 101 Switching Protocols
Connection: Upgrade
Upgrade: websocket
Sec-WebSocket-Accept: poKbNJvVhEw/qpTDPNflKJBLw6Y=
|
|
| fp.metricswpsh.com/fp?tag_id=6720 |  157.90.84.242 | 204 No Content | 0 B |
URL HTTP/1.1fp.metricswpsh.com/fp?tag_id=6720 IP157.90.84.242:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
OPTIONS /fp?tag_id=6720 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Access-Control-Request-Method: POST
Access-Control-Request-Headers: content-type
Referer: https://www5.afilmywap.bz/
Origin: https://www5.afilmywap.bz
Connection: keep-alive
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 204 No Content
Server: nginx/1.20.1
Date: Tue, 29 Nov 2022 04:42:30 GMT
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Headers: content-type
Access-Control-Allow-Methods: GET,HEAD,PUT,PATCH,POST,DELETE
Access-Control-Allow-Origin: https://www5.afilmywap.bz
Vary: Origin, Access-Control-Request-Method, Access-Control-Request-Headers
|
|
| notification.tubecup.net/tags?tag_id=6720&timezone_olson=UTC&version_name=d | 88.198.204.166 | 204 No Content | 0 B |
URL HTTP/2notification.tubecup.net/tags?tag_id=6720&timezone_olson=UTC&version_name=d IP88.198.204.166:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /tags?tag_id=6720&timezone_olson=UTC&version_name=d HTTP/1.1
Host: notification.tubecup.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www5.afilmywap.bz
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 204 No Content
server: nginx/1.18.0
date: Tue, 29 Nov 2022 04:42:30 GMT
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| fp.metricswpsh.com/fp?tag_id=6720 | 157.90.84.242 | 200 OK | 28 B |
URL HTTP/1.1fp.metricswpsh.com/fp?tag_id=6720 IP157.90.84.242:0 ASN#24940 Hetzner Online GmbH
File typeJSON data\012- , ASCII text Hashe3af49472d683a217237a6ebaf79bcb7 378db4d7e6171a2676ee15c80b4475d7f5ec9742 7714898d715fb8b1ce7a1de73e0e7c9f6394acc8a08cf1a3b342a7829d4de84a
POST /fp?tag_id=6720 HTTP/1.1
Host: fp.metricswpsh.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 22287
Origin: https://www5.afilmywap.bz
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/1.1 200 OK
Server: nginx/1.20.1
Date: Tue, 29 Nov 2022 04:42:30 GMT
Content-Type: application/json; charset=UTF-8
Content-Length: 28
Connection: keep-alive
Access-Control-Allow-Credentials: true
Access-Control-Allow-Origin: https://www5.afilmywap.bz
Set-Cookie: id=7890906257397040714; Expires=Wed, 29 Nov 2023 04:42:30 GMT; Secure; SameSite=None
Vary: Origin
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash722fad1bd0c6d414d8522b97eb44ee53 d55bb399ae77080ce6bc9055c073f1a2426a1c7a d7ffee45454fcfcd7659bad141d51da9b02a1d218df3b0a5d161179c881dfc15
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "D7FFEE45454FCFCD7659BAD141D51DA9B02A1D218DF3B0A5D161179C881DFC15"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7700
Expires: Tue, 29 Nov 2022 06:50:50 GMT
Date: Tue, 29 Nov 2022 04:42:30 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hash737bc06ecd2cf8c9422907c0d6f5dd74 8562cae8b64ed2dd47236ea2bbb97ee5e1ed80c8 188ead5f0cef3f08681ac4e964e84fc25272694a57a52c71121c7e10d1a2a269
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "188EAD5F0CEF3F08681AC4E964E84FC25272694A57A52C71121C7E10D1A2A269"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=5110
Expires: Tue, 29 Nov 2022 06:07:40 GMT
Date: Tue, 29 Nov 2022 04:42:30 GMT
Connection: keep-alive
|
|
| d2ddadac2a.5dd044e588.com/in/track?data=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 | 45.133.44.24 | 200 OK | 0 B |
URL HTTP/2d2ddadac2a.5dd044e588.com/in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiI3ODI0MzQ1NDk2OTcxODI5MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTcuMiIsInRhZ19pZCI6NjcyMCwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjUsImlzX3YyIjoxLCJpc192Ml9lbXB0eSI6MCwidXNlcl9rZXl3b3JkcyI6IlVub2ZmaWNpYWwlMkNIaW5kaSUyQ0R1YmJlZCUyQ01vdmllcyUyQzIwMjAlMkNGaWxteXdhcCUyQzFYQkVUJTJDSG9sbHl3b29kJTJDTW92aWUlMkNEdWJiZWQlMkNJbiUyQ0hpbmRpJTJDS2F0TW92aWVzSEQlMkNmcmVlJTJDZG93bmxvYWRzJTJDbW9iaWxlJTJDbW92aWVzJTJDdW5vZmZpY2lhbCUyQ2hvbGx5d29vZCUyQ2hpbmRpJTJDZHViYmVkJTJDbW92aWUlMkNVbm9mZmljaWFsJTJDSG9sbHl3b29kJTJDSGluZGklMkNEdWJiZWQlMkNNb3ZpZSUyQ0ZyZWUlMkNEb3dubG9hZCUyQ1Vub2ZmaWNpYWwlMkNIb2xseXdvb2QlMkNIaW5kaSUyQ0R1YmJlZCUyQ01vdmllJTJDRmlsbXl3YXAlMkMyMDIxJTJDMjAxOSUyQ0Z1bGwlMkNNb3ZpZXMlMkNpbiUyQ0hEJTJDTWt2JTJDQXZpJTJDTXA0JTJDUXVhbGl0eSUyQ0FGaWxteXdhcCUyQ0Rvd25sb2FkaHViJTJDOXhtb3ZpZXMlMkNLaGF0cmltYXphJTJDV29ybGRmcmVlNHUlMkNNb3ZpZXMlMkNQYyUyQ0hEJTJDTXA0JTJDTW9iaWxlJTJDTW92aWVzJTIwIn0= IP45.133.44.24:0 ASN#39572 DataWeb Global Group B.V.
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /in/track?data=eyJ3bCI6MCwic3ViaWQiOjAsInVzZXJfaWQiOiI3ODI0MzQ1NDk2OTcxODI5MDAwIiwidGltZXpvbmUiOjAsInZlciI6IjMuMTcuMiIsInRhZ19pZCI6NjcyMCwic2NyZWVuX3Jlc29sdXRpb24iOiIxMjgweDEwMjQiLCJhZGJsb2NrIjowLCJ0aW1lem9uZV9vbHNvbiI6IlVUQyIsInV0bV9zb3VyY2UiOiIiLCJ1dG1fbWVkaXVtIjoiIiwidXRtX2NhbXBhaWduIjoiIiwidXRtX2NvbnRlbnQiOiIiLCJtbSI6MCwiaW5pdF9zdGFydF9sYXRlbmN5IjowLjUsImlzX3YyIjoxLCJpc192Ml9lbXB0eSI6MCwidXNlcl9rZXl3b3JkcyI6IlVub2ZmaWNpYWwlMkNIaW5kaSUyQ0R1YmJlZCUyQ01vdmllcyUyQzIwMjAlMkNGaWxteXdhcCUyQzFYQkVUJTJDSG9sbHl3b29kJTJDTW92aWUlMkNEdWJiZWQlMkNJbiUyQ0hpbmRpJTJDS2F0TW92aWVzSEQlMkNmcmVlJTJDZG93bmxvYWRzJTJDbW9iaWxlJTJDbW92aWVzJTJDdW5vZmZpY2lhbCUyQ2hvbGx5d29vZCUyQ2hpbmRpJTJDZHViYmVkJTJDbW92aWUlMkNVbm9mZmljaWFsJTJDSG9sbHl3b29kJTJDSGluZGklMkNEdWJiZWQlMkNNb3ZpZSUyQ0ZyZWUlMkNEb3dubG9hZCUyQ1Vub2ZmaWNpYWwlMkNIb2xseXdvb2QlMkNIaW5kaSUyQ0R1YmJlZCUyQ01vdmllJTJDRmlsbXl3YXAlMkMyMDIxJTJDMjAxOSUyQ0Z1bGwlMkNNb3ZpZXMlMkNpbiUyQ0hEJTJDTWt2JTJDQXZpJTJDTXA0JTJDUXVhbGl0eSUyQ0FGaWxteXdhcCUyQ0Rvd25sb2FkaHViJTJDOXhtb3ZpZXMlMkNLaGF0cmltYXphJTJDV29ybGRmcmVlNHUlMkNNb3ZpZXMlMkNQYyUyQ0hEJTJDTXA0JTJDTW9iaWxlJTJDTW92aWVzJTIwIn0= HTTP/1.1
Host: d2ddadac2a.5dd044e588.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www5.afilmywap.bz
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:42:30 GMT
content-length: 0
server: nginx/1.18.0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashba59b69dcc0e8a7c063c5e3b3b76dedc 091fc270532c9498779c0bc8a8b61e5b402b6ec8 be0819a746f0790b4db6f956fb2781a5cd41a1405aa57bf6197c6414b7fc3b6a
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "BE0819A746F0790B4DB6F956FB2781A5CD41A1405AA57BF6197C6414B7FC3B6A"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=7671
Expires: Tue, 29 Nov 2022 06:50:21 GMT
Date: Tue, 29 Nov 2022 04:42:30 GMT
Connection: keep-alive
|
|
| js.wpushsdk.com/npc/sdk/wpu/npush.m.js | 45.133.44.24 | 200 OK | 73 kB |
URL HTTP/2js.wpushsdk.com/npc/sdk/wpu/npush.m.js IP45.133.44.24:0 ASN#39572 DataWeb Global Group B.V.
File typeASCII text, with very long lines (65536), with no line terminators Hashc2b300e5f3345aa192e663c4f7265de1 c7c64fb0817e9cbf7f151094687b2fde7a548dc5 619fc2b4d96c1da2b3c04d5ebe03cfd7da53b264f5bf2d76298cc5cd872ff7dd
GET /npc/sdk/wpu/npush.m.js HTTP/1.1
Host: js.wpushsdk.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: script
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:42:30 GMT
content-type: application/javascript; charset=utf-8
server: nginx/1.18.0
last-modified: Tue, 22 Nov 2022 16:27:58 GMT
etag: W/"637cf88e-48777"
content-encoding: gzip
expires: Tue, 29 Nov 2022 04:47:30 GMT
cache-control: max-age=300
x-proxy-cache: HIT
access-control-allow-origin: *
X-Firefox-Spdy: h2
|
|
| nereserv.com/in/dip?site=native-push&wl=0&event_id=ed833db6-26b4-4580-b91e-9fec3fe9fc72&subid=1692255522&sid=4275097259&spot_id=6302&created_at=2022-11-29&timezone=0&ver=8.5.1&is_native=1 | 157.90.84.246 | 200 OK | 0 B |
URL HTTP/2nereserv.com/in/dip?site=native-push&wl=0&event_id=ed833db6-26b4-4580-b91e-9fec3fe9fc72&subid=1692255522&sid=4275097259&spot_id=6302&created_at=2022-11-29&timezone=0&ver=8.5.1&is_native=1 IP157.90.84.246:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /in/dip?site=native-push&wl=0&event_id=ed833db6-26b4-4580-b91e-9fec3fe9fc72&subid=1692255522&sid=4275097259&spot_id=6302&created_at=2022-11-29&timezone=0&ver=8.5.1&is_native=1 HTTP/1.1
Host: nereserv.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: https://www5.afilmywap.bz
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.20.1
date: Tue, 29 Nov 2022 04:42:30 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashac3edd07bb0a4ebdaae6ec26e91d2079 b6efe3811dfa37cdcde1e9d411c171732ac7e12a c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2440
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 04:42:31 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashac3edd07bb0a4ebdaae6ec26e91d2079 b6efe3811dfa37cdcde1e9d411c171732ac7e12a c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2440
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 04:42:31 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashac3edd07bb0a4ebdaae6ec26e91d2079 b6efe3811dfa37cdcde1e9d411c171732ac7e12a c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2440
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 04:42:31 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashac3edd07bb0a4ebdaae6ec26e91d2079 b6efe3811dfa37cdcde1e9d411c171732ac7e12a c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2440
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 04:42:31 GMT
Connection: keep-alive
|
|
| r3.o.lencr.org/ | 23.36.76.226 | 200 OK | 503 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashac3edd07bb0a4ebdaae6ec26e91d2079 b6efe3811dfa37cdcde1e9d411c171732ac7e12a c5dbd471d178ae4505b28e30aee1e8eed77fffd81b9f7815ad2bda1a0d09a02c
POST / HTTP/1.1
Host: r3.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 503
ETag: "C5DBD471D178AE4505B28E30AEE1E8EED77FFFD81B9F7815AD2BDA1A0D09A02C"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2440
Expires: Tue, 29 Nov 2022 05:23:11 GMT
Date: Tue, 29 Nov 2022 04:42:31 GMT
Connection: keep-alive
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9082acd6-44fd-454b-b215-451cf6d822a1.jpeg | 34.120.237.76 | 200 OK | 8.1 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9082acd6-44fd-454b-b215-451cf6d822a1.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash5ab97acd46d3380fa12711c96b3c2d35 b703ea2cc2fcd68e60135ff77d5a5f1b93fac128 aeeaa56714fbd157e788cd24da03d43ede527959e2563e6d7d99489753dee85f
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2F9082acd6-44fd-454b-b215-451cf6d822a1.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 8106
x-amzn-requestid: 73d1b662-99a8-4ad7-95f9-c0b1ebf7c45a
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cVNnQEhQoAMFbLA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63852961-64954bc92997c9302e291381;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 21:34:25 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: UO4hCMgPgR4-ld-QCKgNPrq4p1gduUSA5R4ffZmnFodBj-1_NcFLmg==
via: 1.1 e291f351a18746d40754b367095a2872.cloudfront.net (CloudFront), 1.1 7e87179efaa9e3c316bd3d3a74cfded8.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 21:37:21 GMT
age: 25510
etag: "b703ea2cc2fcd68e60135ff77d5a5f1b93fac128"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7479fbd-640b-4a65-ac00-893210a725b0.jpeg | 34.120.237.76 | 200 OK | 10 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7479fbd-640b-4a65-ac00-893210a725b0.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc76e3c4cc159bda9b9e887fcd449ba51 12d90c36bd455b3b859fdb761b6ed49ea9f98f80 fc2aad6b1ec65938249970e01a23d35a19cb9c9acbc3524586dd23f7bdaf9690
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fe7479fbd-640b-4a65-ac00-893210a725b0.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 10445
x-amzn-requestid: fb9fc0d4-9f2e-4fab-a259-30300aacdc67
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cCvuDGHaIAMFn_w=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-637dc659-56786e9b754a48b30b5f79c7;Sampled=0
x-amzn-remapped-date: Wed, 23 Nov 2022 07:06:01 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: fkjT2irjF_lGK2IDx2nzFK13MgMQFXrtUIWv9lR9y-f6VT1bthJfyQ==
via: 1.1 0c96ded7ff282d2dbcf47c918b6bb500.cloudfront.net (CloudFront), 1.1 ce71f64ad5dca81beca846466f2d5008.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 14:31:14 GMT
age: 51077
etag: "12d90c36bd455b3b859fdb761b6ed49ea9f98f80"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb99c22d6-3187-4d40-8281-7980c7988464.webp | 34.120.237.76 | 200 OK | 3.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb99c22d6-3187-4d40-8281-7980c7988464.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash06723cdab42df9b5334f540a8c7ebc60 3bbc44cb84a37ce6a067db4301dd81647a77c29f 9f6f064b16044c510650635690c61003fb2f6439021a2e681431136f5e7a08b3
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fb99c22d6-3187-4d40-8281-7980c7988464.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 3905
x-amzn-requestid: bf50db76-dd95-44fc-abbe-1a26a5559ae3
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cMFcYHE6IAMFmpA=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-638182b5-50b6d010058c6cb75c05c6de;Sampled=0
x-amzn-remapped-date: Sat, 26 Nov 2022 03:06:29 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Hit from cloudfront
x-amz-cf-id: qJi8Y13bwnYMJDH5WYNxMShIEZef1SYGdHsDY8_vJoPzwT0PhPr0hQ==
via: 1.1 efe54e8b68e074d39b2ecd249f85100a.cloudfront.net (CloudFront), 1.1 12a392bc3a7281f8d5d4591bfadc41fc.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 07:10:04 GMT
age: 77547
etag: "3bbc44cb84a37ce6a067db4301dd81647a77c29f"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2d4df78-04ce-4ad8-b5a5-07c0212d3a16.jpeg | 34.120.237.76 | 200 OK | 4.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2d4df78-04ce-4ad8-b5a5-07c0212d3a16.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashc812ff38eed34e674ee4090ffc602358 3515adf47d25a17eec2a62d045d217cd23a0f985 17847348aa28dce436e4181ec86578e154c3a700b48df9bbdb771abaa3d2ed58
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fa2d4df78-04ce-4ad8-b5a5-07c0212d3a16.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4901
x-amzn-requestid: a5ad8fee-b892-4485-9975-40e183506a82
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cIsO3HDGIAMFQgQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6380272b-5827122433cb8c6d5ab7e300;Sampled=0
x-amzn-remapped-date: Fri, 25 Nov 2022 02:23:39 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: MSxsBockYtOQ1vJwadowGgFdFGyqM2R4ax2EQTLoVPu6y0hWy1H1sw==
via: 1.1 cd48ffda04934d18865e47e99ea080bc.cloudfront.net (CloudFront), 1.1 64f86ae1c24221f3a2e4d653d6dbc416.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 15:12:07 GMT
age: 48624
etag: "3515adf47d25a17eec2a62d045d217cd23a0f985"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp | 34.120.237.76 | 200 OK | 4.9 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hash83c1fedec73299637cc7dc47c48af758 2e3f7326aeea6be8a34bf2c39b34862c07bfdc41 1fea143e23bb0156062f4c06569824900a67ed83cb99fd635d4c4ab968dc65e9
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Ffe5e6403-f1a3-4b44-a62d-0e47d56bb08e.webp HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 4916
x-amzn-requestid: b8c80a6c-e3f1-4f20-beb8-27b0af760692
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cPYcrELFoAMFaeQ=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-6382d450-155cfb365525173c0ede8adb;Sampled=0
x-amzn-remapped-date: Sun, 27 Nov 2022 03:06:56 GMT
x-amz-cf-pop: SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: Twtw6dO3pjTB9OLi0HliKKCDgCuHRqgtx4PFTczrZQ9f8JztgXZoSg==
via: 1.1 49b94a8674d6e86a841d6523f7dbaf14.cloudfront.net (CloudFront), 1.1 f9d716a351f14a0ac1fac2449734849a.cloudfront.net (CloudFront), 1.1 google
date: Tue, 29 Nov 2022 03:18:11 GMT
age: 5060
etag: "2e3f7326aeea6be8a34bf2c39b34862c07bfdc41"
content-type: image/jpeg
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg | 34.120.237.76 | 200 OK | 9.4 kB |
URL HTTP/2img-getpocket.cdn.mozilla.net/296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg IP34.120.237.76:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 296x148, components 3\012- data Hashcce27a1fe8c0222811a5ce0e7f89e1cb 28c165bac8cf68cd1b0763c311aece00672cb3a5 4530e34a47ef78c2c2b0d34a0511253a61f1927b192ab42f82361002ff10819e
GET /296x148/filters:format(jpeg):quality(60):no_upscale():strip_exif()/https%3A%2F%2Fs3.amazonaws.com%2Fpocket-curatedcorpusapi-prod-images%2Fc326607e-c0fa-4e9d-b8d4-1c9173793bed.jpeg HTTP/1.1
Host: img-getpocket.cdn.mozilla.net
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Origin: null
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx
content-length: 9376
x-amzn-requestid: 265257bd-0177-4e63-879b-e9f99d0d16c7
x-xss-protection: 1; mode=block
access-control-allow-origin: *
strict-transport-security: max-age=63072000; includeSubdomains; preload
x-frame-options: DENY
content-security-policy: default-src 'none'; img-src 'self'; script-src 'self'; style-src 'self'; object-src 'none'
x-amz-apigw-id: cTZANFW2oAMFlyw=
x-content-type-options: nosniff
x-amzn-trace-id: Root=1-63846ecd-6767ccde3361eb593108603d;Sampled=0
x-amzn-remapped-date: Mon, 28 Nov 2022 08:18:21 GMT
x-amz-cf-pop: HIO50-C1, SEA19-C2
x-cache: Miss from cloudfront
x-amz-cf-id: ntQPVFK12XqhVCMlaq0oIDx7k6e2xQdp1Y67W1nG6ayhG1XFekz5CQ==
via: 1.1 98e601970ea59f4d5f56a752787ff9fc.cloudfront.net (CloudFront), 1.1 be082a2326b7d49643607b097f1e7180.cloudfront.net (CloudFront), 1.1 google
date: Mon, 28 Nov 2022 09:53:30 GMT
etag: "28c165bac8cf68cd1b0763c311aece00672cb3a5"
content-type: image/jpeg
age: 67741
cache-control: max-age=3600,public,public
alt-svc: clear
X-Firefox-Spdy: h2
|
|
| 7b7a5435b5.5dd044e588.com/in/multy | 168.119.25.22 | 200 OK | 13 kB |
URL HTTP/27b7a5435b5.5dd044e588.com/in/multy IP168.119.25.22:0 ASN#24940 Hetzner Online GmbH
File typeJSON data\012- , Unicode text, UTF-8 text, with very long lines (12802), with no line terminators Hash19cd368f7f173c70193d16f4e7b40edd 7ef08b2496e625386e7f0fa14f86358fb59230a4 1d1e8a5e1b1390932fb2d77521be92203b02639d1305ce4a7a3f3ddfc496ed7f
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
POST /in/multy HTTP/1.1
Host: 7b7a5435b5.5dd044e588.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Content-Type: application/json;charset=utf-8
Content-Length: 1191
Origin: https://www5.afilmywap.bz
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: empty
Sec-Fetch-Mode: cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 29 Nov 2022 04:42:31 GMT
content-type: application/json
content-length: 12809
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
X-Firefox-Spdy: h2
|
|
| 7b7a5435b5.5dd044e588.com/in/show/?mid=7715050812617778761&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=1692255522&sid=4275097259&cid=12030&price=0.00056&is_cpm=0&cpm=0&ecpm=0.012711233999922938&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=8.5.1&ver_c=&refdom=www5.afilmywap.bz&hostname=auc-inpage-hz-1-b&site_id=316302&spot_id=6302&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1669783350&created_at=2022-11-29&is_native=2&auction_queue=0&burl=HVLzIDL0qHwtuGdUfz8EibTUsi97L8BGojuoVRsT_FLgNl30Z3W3Rtq415Bzb_hExN-XD34p5XRDmW_cOUqoa_JTxlM9V8yH9xvbNboNFrc2zpmExw_d2pPesQc&pop_winurl=&ip=91.90.42.154&testab=0&px_id=536302&adblock=0&auction_host=all&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.002135470085346588&placement_type_id=&skin_test=0&verify_hash=8020881d970718a7b87791295ff7b72a&score=58.947557304478515&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1692255522%26spot_id%3D6302%26is_adult%3D0%26p%3Dhttps%253A%252F%252Fwww5.afilmywap.bz%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=d&original_bid=0.00056&user_fp=0&v2_track=0&url=9oAIIj_Pt9NwcjyvCfuHF1T2WWDZTXrZ3Bk73PEXBUyJNrYZYTv-TM6lTvSmuPLjHk1UGQPT8SSiY7sgULsKG-5jNuG3gc39BRc8T7twRZcSCWkIjnwZsWpKMh3zaGE7L5niM1zEsGBRCKFi8sHRCRDUA_4GFgedDfD7wq13NfWA49dnGQ&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=4&vertical_id=0&real_bid=0.000426496&pr=&user_keywords=&auc_type=1&aid=178&ext_cid=0&device_theme=light&keywords=&mlc=1&format=social-scale-b_r-body&mlf=1&cpa=af676cd0-cb8c-4f04-bf94-be3def3a84ed | 168.119.25.22 | 302 Found | 0 B |
URL HTTP/27b7a5435b5.5dd044e588.com/in/show/?mid=7715050812617778761&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=1692255522&sid=4275097259&cid=12030&price=0.00056&is_cpm=0&cpm=0&ecpm=0.012711233999922938&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=8.5.1&ver_c=&refdom=www5.afilmywap.bz&hostname=auc-inpage-hz-1-b&site_id=316302&spot_id=6302&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1669783350&created_at=2022-11-29&is_native=2&auction_queue=0&burl=HVLzIDL0qHwtuGdUfz8EibTUsi97L8BGojuoVRsT_FLgNl30Z3W3Rtq415Bzb_hExN-XD34p5XRDmW_cOUqoa_JTxlM9V8yH9xvbNboNFrc2zpmExw_d2pPesQc&pop_winurl=&ip=91.90.42.154&testab=0&px_id=536302&adblock=0&auction_host=all&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.002135470085346588&placement_type_id=&skin_test=0&verify_hash=8020881d970718a7b87791295ff7b72a&score=58.947557304478515&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1692255522%26spot_id%3D6302%26is_adult%3D0%26p%3Dhttps%253A%252F%252Fwww5.afilmywap.bz%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=d&original_bid=0.00056&user_fp=0&v2_track=0&url=9oAIIj_Pt9NwcjyvCfuHF1T2WWDZTXrZ3Bk73PEXBUyJNrYZYTv-TM6lTvSmuPLjHk1UGQPT8SSiY7sgULsKG-5jNuG3gc39BRc8T7twRZcSCWkIjnwZsWpKMh3zaGE7L5niM1zEsGBRCKFi8sHRCRDUA_4GFgedDfD7wq13NfWA49dnGQ&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=4&vertical_id=0&real_bid=0.000426496&pr=&user_keywords=&auc_type=1&aid=178&ext_cid=0&device_theme=light&keywords=&mlc=1&format=social-scale-b_r-body&mlf=1&cpa=af676cd0-cb8c-4f04-bf94-be3def3a84ed IP168.119.25.22:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /in/show/?mid=7715050812617778761&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=1692255522&sid=4275097259&cid=12030&price=0.00056&is_cpm=0&cpm=0&ecpm=0.012711233999922938&crid=&crtid=41e2b054b7d7fdd561f6651d06d511e5&tcid=0&out_id=1&ver=8.5.1&ver_c=&refdom=www5.afilmywap.bz&hostname=auc-inpage-hz-1-b&site_id=316302&spot_id=6302&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1669783350&created_at=2022-11-29&is_native=2&auction_queue=0&burl=HVLzIDL0qHwtuGdUfz8EibTUsi97L8BGojuoVRsT_FLgNl30Z3W3Rtq415Bzb_hExN-XD34p5XRDmW_cOUqoa_JTxlM9V8yH9xvbNboNFrc2zpmExw_d2pPesQc&pop_winurl=&ip=91.90.42.154&testab=0&px_id=536302&adblock=0&auction_host=all&mm=0&yc=0&render_type=mq&campaign_type=lq-pop&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.002135470085346588&placement_type_id=&skin_test=0&verify_hash=8020881d970718a7b87791295ff7b72a&score=58.947557304478515&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1692255522%26spot_id%3D6302%26is_adult%3D0%26p%3Dhttps%253A%252F%252Fwww5.afilmywap.bz%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=d&original_bid=0.00056&user_fp=0&v2_track=0&url=9oAIIj_Pt9NwcjyvCfuHF1T2WWDZTXrZ3Bk73PEXBUyJNrYZYTv-TM6lTvSmuPLjHk1UGQPT8SSiY7sgULsKG-5jNuG3gc39BRc8T7twRZcSCWkIjnwZsWpKMh3zaGE7L5niM1zEsGBRCKFi8sHRCRDUA_4GFgedDfD7wq13NfWA49dnGQ&image_url=https%3A%2F%2Fstatic.bookmsg.com%2Fcreatives%2FIN%2FIN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp&skin_id=4&vertical_id=0&real_bid=0.000426496&pr=&user_keywords=&auc_type=1&aid=178&ext_cid=0&device_theme=light&keywords=&mlc=1&format=social-scale-b_r-body&mlf=1&cpa=af676cd0-cb8c-4f04-bf94-be3def3a84ed HTTP/1.1
Host: 7b7a5435b5.5dd044e588.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Tue, 29 Nov 2022 04:42:32 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 346 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf417a0a8a50a320ad30eebbe2390e747 638099b8122bedce27f23b132a3b67ca7b2c9d92 032f3e3da4896ac29bd4ffa11739df47efc783176e36785209111e15429a5467
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "032F3E3DA4896AC29BD4FFA11739DF47EFC783176E36785209111E15429A5467"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2679
Expires: Tue, 29 Nov 2022 05:27:11 GMT
Date: Tue, 29 Nov 2022 04:42:32 GMT
Connection: keep-alive
|
|
| 7b7a5435b5.5dd044e588.com/in/show/?mid=7715050812617778761&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=1692255522&sid=4275097259&cid=12019&price=0.0014&is_cpm=0&cpm=0&ecpm=0.025850077413567846&crid=5629323&crtid=e83e8ae182ef254449f6de8fd40558f7&tcid=0&out_id=0&ver=8.5.1&ver_c=&refdom=www5.afilmywap.bz&hostname=auc-inpage-hz-1-b&site_id=316302&spot_id=6302&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1669783350&created_at=2022-11-29&is_native=1&auction_queue=0&burl=KECdxkXBqAFgzP_YEmbd63dEMVcef5AdfNOgvzymP7bsKqsmsVXBhQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=316302&adblock=0&auction_host=all&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.0014628304750112123&placement_type_id=&skin_test=0&verify_hash=f98d72dc1fc29f91d22ea1a220997bda&score=58.947557304478515&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1692255522%26spot_id%3D6302%26is_adult%3D0%26p%3Dhttps%253A%252F%252Fwww5.afilmywap.bz%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=d&original_bid=0.0014&user_fp=0&v2_track=0&url=qNGT9T1np64o0kEnUY1zKJCa-T9JK_1WHNKCW75AeTgRSCxErDvbBHjUo62G1KM88VL4ZaMOhDIm85qegHsZT33MyePik1PaqaO0JrxOWcANXMgX8msx97MeEbhoxB6gc4ZndrY&image_url=https%3A%2F%2Fxml.serve-rtb.com%2Fthumbnail%3Fi%3D6kXUIkjkVWs_0&skin_id=4&vertical_id=5&real_bid=0.00126616&pr=&user_keywords=&auc_type=1&aid=185&ext_cid=0&device_theme=light&keywords=&format=social-scale-b_r-body&cpa=693e4dd1-e80c-44ed-b305-475142fa0732 | 168.119.25.22 | 302 Found | 0 B |
URL HTTP/27b7a5435b5.5dd044e588.com/in/show/?mid=7715050812617778761&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=1692255522&sid=4275097259&cid=12019&price=0.0014&is_cpm=0&cpm=0&ecpm=0.025850077413567846&crid=5629323&crtid=e83e8ae182ef254449f6de8fd40558f7&tcid=0&out_id=0&ver=8.5.1&ver_c=&refdom=www5.afilmywap.bz&hostname=auc-inpage-hz-1-b&site_id=316302&spot_id=6302&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1669783350&created_at=2022-11-29&is_native=1&auction_queue=0&burl=KECdxkXBqAFgzP_YEmbd63dEMVcef5AdfNOgvzymP7bsKqsmsVXBhQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=316302&adblock=0&auction_host=all&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.0014628304750112123&placement_type_id=&skin_test=0&verify_hash=f98d72dc1fc29f91d22ea1a220997bda&score=58.947557304478515&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1692255522%26spot_id%3D6302%26is_adult%3D0%26p%3Dhttps%253A%252F%252Fwww5.afilmywap.bz%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=d&original_bid=0.0014&user_fp=0&v2_track=0&url=qNGT9T1np64o0kEnUY1zKJCa-T9JK_1WHNKCW75AeTgRSCxErDvbBHjUo62G1KM88VL4ZaMOhDIm85qegHsZT33MyePik1PaqaO0JrxOWcANXMgX8msx97MeEbhoxB6gc4ZndrY&image_url=https%3A%2F%2Fxml.serve-rtb.com%2Fthumbnail%3Fi%3D6kXUIkjkVWs_0&skin_id=4&vertical_id=5&real_bid=0.00126616&pr=&user_keywords=&auc_type=1&aid=185&ext_cid=0&device_theme=light&keywords=&format=social-scale-b_r-body&cpa=693e4dd1-e80c-44ed-b305-475142fa0732 IP168.119.25.22:0 ASN#24940 Hetzner Online GmbH
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
| Analyzer | Verdict | Alert |
|---|
| quad9 | Sinkholed | |
GET /in/show/?mid=7715050812617778761&pid=0&site=native-push-mainstream&sc=NO&usage_type=DCH&subid=1692255522&sid=4275097259&cid=12019&price=0.0014&is_cpm=0&cpm=0&ecpm=0.025850077413567846&crid=5629323&crtid=e83e8ae182ef254449f6de8fd40558f7&tcid=0&out_id=0&ver=8.5.1&ver_c=&refdom=www5.afilmywap.bz&hostname=auc-inpage-hz-1-b&site_id=316302&spot_id=6302&utm_source=&utm_medium=&utm_campaign=&utm_content=&expiration_timestamp=1669783350&created_at=2022-11-29&is_native=1&auction_queue=0&burl=KECdxkXBqAFgzP_YEmbd63dEMVcef5AdfNOgvzymP7bsKqsmsVXBhQ&pop_winurl=&ip=91.90.42.154&testab=0&px_id=316302&adblock=0&auction_host=all&mm=0&yc=0&render_type=mq&campaign_type=mq&uniq=&exp=&resp_type=&iabcat=IAB1-5&min_cpm=0.0014628304750112123&placement_type_id=&skin_test=0&verify_hash=f98d72dc1fc29f91d22ea1a220997bda&score=58.947557304478515&durl=https%3A%2F%2Fts.cvastico.com%2Fin%2F1546%2F%3Fad_sub%3D1692255522%26spot_id%3D6302%26is_adult%3D0%26p%3Dhttps%253A%252F%252Fwww5.afilmywap.bz%252F%26idzone%3D0%26sid%3D1885&ml=&tag_ab=d&original_bid=0.0014&user_fp=0&v2_track=0&url=qNGT9T1np64o0kEnUY1zKJCa-T9JK_1WHNKCW75AeTgRSCxErDvbBHjUo62G1KM88VL4ZaMOhDIm85qegHsZT33MyePik1PaqaO0JrxOWcANXMgX8msx97MeEbhoxB6gc4ZndrY&image_url=https%3A%2F%2Fxml.serve-rtb.com%2Fthumbnail%3Fi%3D6kXUIkjkVWs_0&skin_id=4&vertical_id=5&real_bid=0.00126616&pr=&user_keywords=&auc_type=1&aid=185&ext_cid=0&device_theme=light&keywords=&format=social-scale-b_r-body&cpa=693e4dd1-e80c-44ed-b305-475142fa0732 HTTP/1.1
Host: 7b7a5435b5.5dd044e588.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
server: nginx/1.18.0
date: Tue, 29 Nov 2022 04:42:32 GMT
content-length: 0
vary: Origin
cache-control: no-transform, no-cache, no-store, must-revalidate
pragma: no-cache
access-control-allow-origin: *
access-control-allow-headers: Content-Type
access-control-allow-methods: *
location: https://xml.serve-rtb.com/thumbnail?i=6kXUIkjkVWs_0&imgt=icon
X-Firefox-Spdy: h2
|
|
| static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp | 88.198.136.234 | 200 OK | 790 B |
URL HTTP/2static.bookmsg.com/creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp IP88.198.136.234:0 ASN#24940 Hetzner Online GmbH
File typeRIFF (little-endian) data, Web/P image, VP8 encoding, 100x100, Scaling: [none]x[none], YUV color, decoders should clamp\012- data Hash65156a660e465299370ebd90d84aa461 12ff60b17f579a77e42a8be7b6b1892fc71be33d e3b2784385cd128d5a6dfdec7f4be2147d6b57fa66c1a36c61c085aaf27f9e18
GET /creatives/IN/IN_da5b583487923e03a815871465a0b6f24c2cb005_icon.webp HTTP/1.1
Host: static.bookmsg.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Referer: https://www5.afilmywap.bz/
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 200 OK
server: nginx/1.18.0
date: Tue, 29 Nov 2022 04:42:32 GMT
content-type: image/webp
content-length: 790
last-modified: Tue, 24 Nov 2020 14:20:43 GMT
etag: "5fbd16bb-316"
cache-control: public, max-age=315360000
accept-ranges: bytes
X-Firefox-Spdy: h2
|
|
| xml.serve-rtb.com/thumbnail?i=6kXUIkjkVWs_0 | 104.21.90.2 | 302 Found | 0 B |
URL HTTP/2xml.serve-rtb.com/thumbnail?i=6kXUIkjkVWs_0 IP104.21.90.2:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=6kXUIkjkVWs_0 HTTP/1.1
Host: xml.serve-rtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
HTTP/2 302 Found
date: Tue, 29 Nov 2022 04:42:32 GMT
content-length: 0
location: https://static.serve-rtb.com/n337/ad/300x300_jV6A5HbXNfOCOVqK9JuT.jpeg
cache-control: no-store
age: 0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=421XfoYMEhq6pP8mFe9XIxWObQmf%2F4UuG%2Bfc%2FJJZBYCAATmpAFFk4aqfp7sPfnFSi3Dvq48zMrExHHKVek1H%2Fs13kQgxaaxBCjAxPEAGuapUUS8HYQWHd6%2BCfAdh4UrefWg6HA%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7718ad5e6d1b0afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| xml.serve-rtb.com/thumbnail?i=6kXUIkjkVWs_0&imgt=icon | 104.21.90.2 | 302 Found | 0 B |
URL HTTP/2xml.serve-rtb.com/thumbnail?i=6kXUIkjkVWs_0&imgt=icon IP104.21.90.2:0
Hashd41d8cd98f00b204e9800998ecf8427e da39a3ee5e6b4b0d3255bfef95601890afd80709 e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
GET /thumbnail?i=6kXUIkjkVWs_0&imgt=icon HTTP/1.1
Host: xml.serve-rtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 302 Found
date: Tue, 29 Nov 2022 04:42:32 GMT
content-length: 0
location: https://static.serve-rtb.com/n337/ad/300x300_9Asu5SQoFIFxfJO5Tm4a.jpeg
cache-control: no-store
age: 0
pragma: no-cache
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=BPa3CzbXUMosF7z7SibgfRWpoBh4V12HvZEqsuU%2FG8%2BXVUe4RnPtlGgSa9RyJz06C4ekw87QARpa5LCcEFPo8zY92VswWA3I6LxCU9trUadkVdVnm%2BJ0LOzPFCcrkNDUSjeVSQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7718ad5e7d1f0afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| static.serve-rtb.com/n337/ad/300x300_jV6A5HbXNfOCOVqK9JuT.jpeg | 104.21.90.2 | 200 OK | 13 kB |
URL HTTP/2static.serve-rtb.com/n337/ad/300x300_jV6A5HbXNfOCOVqK9JuT.jpeg IP104.21.90.2:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3\012- data Hashb7b4f3b6a94991f3ad31dc2a42a52955 552de112b8110958cfa64b695cc66bb34f2c9870 d2a8d5ffdf65c74a0f9f6a5ec7e556c763515771221ad7123a970eee3f97a05a
GET /n337/ad/300x300_jV6A5HbXNfOCOVqK9JuT.jpeg HTTP/1.1
Host: static.serve-rtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:42:32 GMT
content-type: image/jpeg
content-length: 12822
last-modified: Fri, 04 Nov 2022 11:46:25 GMT
etag: "6364fb91-3216"
cache-control: max-age=86400
x-hw: 1668294601.cds207.sk1.h2,1668294601.cds250.sk1.c
access-control-allow-origin: *
cf-cache-status: HIT
age: 12701
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=fTnawqZRHTj6RYlC%2BcYwDVhtsfLZJcOuuUYR1WalJu6m02XK9bfanb1gsg3rLAydx8LVyU8C83ai%2FzJYzaS8SRpA8XnniOcwzfCyzjdoYD1nKDC8Js98r%2BWX6NTtv1egBktHULKqpQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7718ad5fdd9f0afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| e1.o.lencr.org/ | 23.36.76.226 | 200 OK | 346 B |
IP23.36.76.226:0 ASN#20940 Akamai International B.V.
Hashf417a0a8a50a320ad30eebbe2390e747 638099b8122bedce27f23b132a3b67ca7b2c9d92 032f3e3da4896ac29bd4ffa11739df47efc783176e36785209111e15429a5467
POST / HTTP/1.1
Host: e1.o.lencr.org
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: */*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate
Content-Type: application/ocsp-request
Content-Length: 85
Connection: keep-alive
Pragma: no-cache
Cache-Control: no-cache
HTTP/1.1 200 OK
Server: nginx
Content-Type: application/ocsp-response
Content-Length: 346
ETag: "032F3E3DA4896AC29BD4FFA11739DF47EFC783176E36785209111E15429A5467"
Last-Modified: Mon, 28 Nov 2022 21:00:00 UTC
Cache-Control: public, no-transform, must-revalidate, max-age=2679
Expires: Tue, 29 Nov 2022 05:27:11 GMT
Date: Tue, 29 Nov 2022 04:42:32 GMT
Connection: keep-alive
|
|
| static.serve-rtb.com/n337/ad/300x300_9Asu5SQoFIFxfJO5Tm4a.jpeg | 104.21.90.2 | 200 OK | 13 kB |
URL HTTP/2static.serve-rtb.com/n337/ad/300x300_9Asu5SQoFIFxfJO5Tm4a.jpeg IP104.21.90.2:0
File typeJPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 300x300, components 3\012- data Hashb7b4f3b6a94991f3ad31dc2a42a52955 552de112b8110958cfa64b695cc66bb34f2c9870 d2a8d5ffdf65c74a0f9f6a5ec7e556c763515771221ad7123a970eee3f97a05a
GET /n337/ad/300x300_9Asu5SQoFIFxfJO5Tm4a.jpeg HTTP/1.1
Host: static.serve-rtb.com
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: image/avif,image/webp,*/*
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Sec-Fetch-Dest: image
Sec-Fetch-Mode: no-cors
Sec-Fetch-Site: cross-site
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:42:32 GMT
content-type: image/jpeg
content-length: 12822
last-modified: Fri, 04 Nov 2022 11:46:29 GMT
etag: "6364fb95-3216"
cache-control: max-age=86400
x-hw: 1668643868.cds012.sk1.h2,1668643868.cds213.sk1.c
access-control-allow-origin: *
cf-cache-status: HIT
age: 15360
accept-ranges: bytes
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=gYAjvtMz72indTE16Cvk%2BjBsh6QizygE4uKd3KgxeYvCqO3c4cQ3Ha92DAFQ3uYukPRGd7bMCG24H8RwvncVrpkd7P%2FvRD17j2dqrsmSJQ6YelM9shtZ8mmKdyI%2BhJEhXbn9CFkaHw%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
vary: Accept-Encoding
server: cloudflare
cf-ray: 7718ad5feda60afe-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www1.afilmywap.bz/category/183/unofficial-hollywood-hindi-dubbed-movie/default/1.html | 104.21.75.148 | 301 Moved Permanently | 0 B |
URL HTTP/2www1.afilmywap.bz/category/183/unofficial-hollywood-hindi-dubbed-movie/default/1.html IP104.21.75.148:0
GET /category/183/unofficial-hollywood-hindi-dubbed-movie/default/1.html HTTP/1.1
Host: www1.afilmywap.bz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
HTTP/2 301 Moved Permanently
date: Tue, 29 Nov 2022 04:42:29 GMT
content-type: text/html; charset=UTF-8
location: https://www5.afilmywap.bz/category/183/unofficial-hollywood-hindi-dubbed-movie/default/1.html
content-security-policy: frame-ancestors 'none'
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: MISS
x-server-powered-by: Engintron
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=guLpJi2NNwROxn7ptfSn3b%2BHh%2Fh6Q6wVqXVPRe8gfJtOjeK2%2BP6XICAk7dBDLSLjLl3Gl4H0MGFFKRqrGnf02azpOq%2BJZQ3wxeZ5FyBAZXRRAy9IaW89z4FZDElaEVHdBZc7GQ%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7718ad4cfedcb50b-OSL
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|
| www5.afilmywap.bz/category/183/unofficial-hollywood-hindi-dubbed-movie/default/1.html | 104.21.75.148 | 200 OK | 0 B |
URL HTTP/2www5.afilmywap.bz/category/183/unofficial-hollywood-hindi-dubbed-movie/default/1.html IP104.21.75.148:0
GET /category/183/unofficial-hollywood-hindi-dubbed-movie/default/1.html HTTP/1.1
Host: www5.afilmywap.bz
User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:105.0) Gecko/20100101 Firefox/105.0
Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8
Accept-Language: en-US,en;q=0.5
Accept-Encoding: gzip, deflate, br
Connection: keep-alive
Upgrade-Insecure-Requests: 1
Sec-Fetch-Dest: document
Sec-Fetch-Mode: navigate
Sec-Fetch-Site: none
Sec-Fetch-User: ?1
TE: trailers
HTTP/2 200 OK
date: Tue, 29 Nov 2022 04:42:29 GMT
content-type: text/html; charset=UTF-8
vary: Accept-Encoding
content-security-policy: frame-ancestors 'none'
x-xss-protection: 1; mode=block
x-content-type-options: nosniff
x-nginx-upstream-cache-status: EXPIRED
x-server-powered-by: Engintron
cf-cache-status: DYNAMIC
report-to: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=DeQN6SJxcqhyoLMZsOfTZ1iP%2FB3zYlaweIhojWGwH797rXxWrBKk7xpOrXy3epahujq8g6miImyWmc5%2FbkVEDBmj5QLv5tE%2BOwrY56nYmHzFMCYA2omxt%2BxGKjo%2FpuwR6cnn%2Fg%3D%3D"}],"group":"cf-nel","max_age":604800}
nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
server: cloudflare
cf-ray: 7718ad4d9f11b50b-OSL
content-encoding: br
alt-svc: h3=":443"; ma=86400, h3-29=":443"; ma=86400
X-Firefox-Spdy: h2
|
|